Privacy Policy
Last updated: 11 September 2026
This policy explains how DARB GROUP LIMITED collects and uses personal data through www.darbagency.com and in the course of its work.
1. Who we are
DARB GROUP LIMITED, trading as DARB Agency, is the data controller for the personal data described in this policy.
Registered in England and Wales, company number 16756223
Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF
Email: hello@darbagency.com
If you have a question about this policy or about how we handle your data, email us at the address above and we will respond within one month.
2. What we collect
When you use the contact form. Your name, your email address, your telephone number if you choose to give it, and the content of your message. The telephone field is optional.
When you email or call us. Your contact details and the content of the correspondence.
When you browse the site. Your IP address, browser type and version, device type, approximate location at city level, the pages you visit, how long you spend on them, and the site or search term that brought you here. This comes from analytics tools and only runs if you accept analytics cookies. See our Cookie Policy for the detail.
When we work together. Contact details for you and your team, billing details, project material, and the correspondence between us.
We do not collect special category data (such as health, religion or ethnicity) through this website, and we ask that you do not send it to us through the contact form.
3. Why we use it and our lawful basis
What we do
Reply to your enquiry
Why
To answer the question you asked us
Lawful basis
Legitimate interests, and steps taken at your request before entering a contract
What we do
Prepare quotes and proposals
Why
To price and scope the work
Lawful basis
Steps taken at your request before entering a contract
What we do
Deliver a project
Why
To do the work you have engaged us for
Lawful basis
Performance of a contract
What we do
Invoice and keep accounts
Why
To get paid and to meet our tax obligations
Lawful basis
Legal obligation, and legitimate interests
What we do
Analytics on how the site is used
Why
To understand what people read and improve the site
Lawful basis
Consent
What we do
Show our work in our portfolio
Why
To market the agency, within the limits our client contracts set
Lawful basis
Legitimate interests
What we do
Defend a legal claim
Why
To protect the business
Lawful basis
Legitimate interests
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we have concluded it is not. You can object to that processing at any time using the contact details above.
4. Who we share it with
We do not sell your personal data and we never will.
We share it with the service providers who make the business run. Each of them acts on our instructions.
Framer B.V. (Netherlands). Hosts this website and stores contact form submissions.
Google Ireland Limited. Google Analytics 4, only where you have accepted analytics cookies.
Metricool (Spain). Website and social analytics, only where you have accepted analytics cookies.
Microsoft and Google, as our email and document providers.
Zoho Corporation, for invoicing.
Our accountants, and our professional advisers where we need advice.
We will also disclose data where the law requires it, or to establish or defend a legal claim.
Our co-founder is based in the United Arab Emirates and works on the business from there, so your data may be accessed from outside the United Kingdom. That processing is carried out for, and under the instructions of, our UK company and remains subject to UK data protection law. Where any of our providers transfer data outside the UK, they do so under the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
5. How long we keep it
Enquiries that do not become work: 24 months from your last contact with us, then deleted.
Client records and correspondence: 7 years from the end of the engagement, which matches the period we must keep accounting records.
Invoices and accounting records: 7 years, as required by the Companies Act 2006 and HMRC.
Analytics data: 14 months in Google Analytics.
Cookie consent records: 12 months, so we can show what you chose.
6. Your rights
Under the UK GDPR you have the right to:
Ask for a copy of the personal data we hold about you.
Ask us to correct data that is wrong or incomplete.
Ask us to delete your data, where we have no continuing reason to keep it.
Ask us to restrict how we use it while a dispute is resolved.
Object to processing that we base on legitimate interests.
Ask us to send your data to you or to someone else in a portable format.
Withdraw your consent at any time, where consent is the basis we rely on. Withdrawing consent does not affect anything we did before you withdrew it.
To use any of these rights, email hello@darbagency.com. We will respond within one month. There is no charge.
We do not use automated decision-making or profiling that produces legal effects for you.
7. Complaints
If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office at any time.
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone 0303 123 1113. Website ico.org.uk.
8. Security
We use reputable providers, and we keep access to client data limited to the people who need it. No system is perfectly secure, and we cannot guarantee the security of data you send to us over the internet.
9. Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16.
10. Changes
We update this policy when the way we work changes. The date at the top tells you when we last did. If we make a change that materially affects you, we will say so on this page.